2025/10/21 13:15:01 extracted 329940 text symbol hashes for base and 329940 for patched 2025/10/21 13:15:01 binaries are different, continuing fuzzing 2025/10/21 13:15:01 adding modified_functions to focus areas: ["init_vq" "virtblk_config_changed_work" "virtblk_freeze" "virtblk_get_cache_mode" "virtblk_probe" "virtblk_reset_prepare" "virtblk_restore"] 2025/10/21 13:15:01 adding directly modified files to focus areas: ["drivers/block/virtio_blk.c"] 2025/10/21 13:15:01 downloading corpus #1: "https://storage.googleapis.com/syzkaller/corpus/ci2-upstream-fs-corpus.db" 2025/10/21 13:15:52 runner 1 connected 2025/10/21 13:15:52 runner 4 connected 2025/10/21 13:15:52 runner 2 connected 2025/10/21 13:15:52 runner 0 connected 2025/10/21 13:15:53 runner 6 connected 2025/10/21 13:15:53 runner 7 connected 2025/10/21 13:15:54 runner 2 connected 2025/10/21 13:15:58 initializing coverage information... 2025/10/21 13:15:58 executor cover filter: 0 PCs 2025/10/21 13:15:59 runner 8 connected 2025/10/21 13:15:59 runner 0 connected 2025/10/21 13:16:00 runner 3 connected 2025/10/21 13:16:00 runner 5 connected 2025/10/21 13:16:00 runner 1 connected 2025/10/21 13:16:02 discovered 7763 source files, 340898 symbols 2025/10/21 13:16:03 coverage filter: init_vq: [init_vq init_vqs init_vqs init_vqs virtcrypto_init_vqs virtio_fs_init_vq] 2025/10/21 13:16:03 coverage filter: virtblk_config_changed_work: [virtblk_config_changed_work] 2025/10/21 13:16:03 coverage filter: virtblk_freeze: [virtblk_freeze] 2025/10/21 13:16:03 coverage filter: virtblk_get_cache_mode: [virtblk_get_cache_mode] 2025/10/21 13:16:03 coverage filter: virtblk_probe: [virtblk_probe] 2025/10/21 13:16:03 coverage filter: virtblk_reset_prepare: [virtblk_reset_prepare] 2025/10/21 13:16:03 coverage filter: virtblk_restore: [virtblk_restore] 2025/10/21 13:16:03 coverage filter: drivers/block/virtio_blk.c: [drivers/block/virtio_blk.c] 2025/10/21 13:16:03 area "symbols": 302 PCs in the cover filter 2025/10/21 13:16:03 area "files": 479 PCs in the cover filter 2025/10/21 13:16:03 area "": 0 PCs in the cover filter 2025/10/21 13:16:03 executor cover filter: 0 PCs 2025/10/21 13:16:04 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$bcachefs : /proc/filesystems does not contain bcachefs syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 570/8056 2025/10/21 13:16:04 base: machine check complete 2025/10/21 13:16:05 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$bcachefs : /proc/filesystems does not contain bcachefs syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 570/8056 2025/10/21 13:16:05 new: machine check complete 2025/10/21 13:16:05 new: adding 12744 seeds 2025/10/21 13:17:39 crash "kernel BUG in hfs_write_inode" is already known 2025/10/21 13:17:39 base crash "kernel BUG in hfs_write_inode" is to be ignored 2025/10/21 13:17:39 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:17:41 crash "kernel BUG in hfs_write_inode" is already known 2025/10/21 13:17:41 base crash "kernel BUG in hfs_write_inode" is to be ignored 2025/10/21 13:17:41 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:17:52 crash "kernel BUG in hfs_write_inode" is already known 2025/10/21 13:17:52 base crash "kernel BUG in hfs_write_inode" is to be ignored 2025/10/21 13:17:52 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:17:53 crash "kernel BUG in hfs_write_inode" is already known 2025/10/21 13:17:53 base crash "kernel BUG in hfs_write_inode" is to be ignored 2025/10/21 13:17:53 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:17:54 crash "kernel BUG in hfs_write_inode" is already known 2025/10/21 13:17:54 base crash "kernel BUG in hfs_write_inode" is to be ignored 2025/10/21 13:17:54 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:18:09 crash "kernel BUG in txUnlock" is already known 2025/10/21 13:18:09 base crash "kernel BUG in txUnlock" is to be ignored 2025/10/21 13:18:09 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/10/21 13:18:29 runner 5 connected 2025/10/21 13:18:30 runner 3 connected 2025/10/21 13:18:32 base crash: possible deadlock in dqget 2025/10/21 13:18:41 runner 1 connected 2025/10/21 13:18:42 runner 6 connected 2025/10/21 13:18:43 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:18:49 runner 7 connected 2025/10/21 13:18:59 runner 2 connected 2025/10/21 13:19:22 runner 2 connected 2025/10/21 13:19:35 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:19:37 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:19:37 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:19:38 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:19:40 runner 0 connected 2025/10/21 13:19:52 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:20:03 STAT { "buffer too small": 0, "candidate triage jobs": 25, "candidates": 9983, "comps overflows": 0, "corpus": 2679, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 628, "coverage": 77461, "distributor delayed": 3348, "distributor undelayed": 3345, "distributor violated": 111, "exec candidate": 2761, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 4581, "exec total [new]": 12216, "exec triage": 8408, "executor restarts [base]": 75, "executor restarts [new]": 161, "fault jobs": 0, "fuzzer jobs": 25, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 5, "hints jobs": 0, "max signal": 78066, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2761, "no exec duration": 21774000000, "no exec requests": 100, "pending": 0, "prog exec time": 182, "reproducing": 0, "rpc recv": 1299357848, "rpc sent": 259886144, "signal": 76757, "smash jobs": 0, "triage jobs": 0, "vm output": 6367618, "vm restarts [base]": 5, "vm restarts [new]": 15 } 2025/10/21 13:20:23 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:20:27 runner 2 connected 2025/10/21 13:20:32 runner 6 connected 2025/10/21 13:20:33 runner 5 connected 2025/10/21 13:20:36 runner 1 connected 2025/10/21 13:20:37 crash "INFO: task hung in __iterate_supers" is already known 2025/10/21 13:20:37 base crash "INFO: task hung in __iterate_supers" is to be ignored 2025/10/21 13:20:37 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2025/10/21 13:20:41 runner 2 connected 2025/10/21 13:21:06 base crash: kernel BUG in txUnlock 2025/10/21 13:21:19 runner 0 connected 2025/10/21 13:21:33 runner 8 connected 2025/10/21 13:21:40 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:21:40 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:21:41 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:21:52 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:21:52 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:21:53 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:22:02 runner 2 connected 2025/10/21 13:22:11 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:22:14 crash "kernel BUG in jfs_evict_inode" is already known 2025/10/21 13:22:14 base crash "kernel BUG in jfs_evict_inode" is to be ignored 2025/10/21 13:22:14 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:22:29 runner 7 connected 2025/10/21 13:22:29 runner 6 connected 2025/10/21 13:22:29 runner 2 connected 2025/10/21 13:22:42 runner 1 connected 2025/10/21 13:22:42 runner 0 connected 2025/10/21 13:22:42 runner 0 connected 2025/10/21 13:23:00 runner 1 connected 2025/10/21 13:23:03 runner 4 connected 2025/10/21 13:23:19 crash "kernel BUG in txEnd" is already known 2025/10/21 13:23:19 base crash "kernel BUG in txEnd" is to be ignored 2025/10/21 13:23:19 patched crashed: kernel BUG in txEnd [need repro = false] 2025/10/21 13:23:30 crash "kernel BUG in txEnd" is already known 2025/10/21 13:23:30 base crash "kernel BUG in txEnd" is to be ignored 2025/10/21 13:23:30 patched crashed: kernel BUG in txEnd [need repro = false] 2025/10/21 13:23:52 crash "kernel BUG in jfs_evict_inode" is already known 2025/10/21 13:23:52 base crash "kernel BUG in jfs_evict_inode" is to be ignored 2025/10/21 13:23:52 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:23:53 crash "kernel BUG in jfs_evict_inode" is already known 2025/10/21 13:23:53 base crash "kernel BUG in jfs_evict_inode" is to be ignored 2025/10/21 13:23:53 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:23:54 crash "kernel BUG in jfs_evict_inode" is already known 2025/10/21 13:23:54 base crash "kernel BUG in jfs_evict_inode" is to be ignored 2025/10/21 13:23:54 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:23:56 crash "kernel BUG in jfs_evict_inode" is already known 2025/10/21 13:23:56 base crash "kernel BUG in jfs_evict_inode" is to be ignored 2025/10/21 13:23:56 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:23:56 crash "kernel BUG in jfs_evict_inode" is already known 2025/10/21 13:23:56 base crash "kernel BUG in jfs_evict_inode" is to be ignored 2025/10/21 13:23:56 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:24:15 runner 2 connected 2025/10/21 13:24:19 runner 1 connected 2025/10/21 13:24:41 runner 5 connected 2025/10/21 13:24:43 runner 6 connected 2025/10/21 13:24:43 runner 3 connected 2025/10/21 13:24:45 runner 7 connected 2025/10/21 13:24:45 runner 4 connected 2025/10/21 13:24:58 base crash: kernel BUG in jfs_evict_inode 2025/10/21 13:25:03 STAT { "buffer too small": 0, "candidate triage jobs": 52, "candidates": 7638, "comps overflows": 0, "corpus": 4932, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 1336, "coverage": 88935, "distributor delayed": 6946, "distributor undelayed": 6946, "distributor violated": 224, "exec candidate": 5106, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 8806, "exec total [new]": 23230, "exec triage": 15424, "executor restarts [base]": 122, "executor restarts [new]": 317, "fault jobs": 0, "fuzzer jobs": 52, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 7, "hints jobs": 0, "max signal": 89681, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 5106, "no exec duration": 21774000000, "no exec requests": 100, "pending": 0, "prog exec time": 367, "reproducing": 0, "rpc recv": 2600254028, "rpc sent": 533930336, "signal": 88295, "smash jobs": 0, "triage jobs": 0, "vm output": 14274585, "vm restarts [base]": 10, "vm restarts [new]": 33 } 2025/10/21 13:25:07 base crash: kernel BUG in jfs_evict_inode 2025/10/21 13:25:10 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:25:11 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:25:21 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:25:23 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:25:23 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:25:54 runner 2 connected 2025/10/21 13:25:59 runner 2 connected 2025/10/21 13:26:00 runner 4 connected 2025/10/21 13:26:02 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:26:03 runner 0 connected 2025/10/21 13:26:10 runner 8 connected 2025/10/21 13:26:13 runner 6 connected 2025/10/21 13:26:13 runner 0 connected 2025/10/21 13:26:48 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/10/21 13:26:48 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/10/21 13:26:48 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/10/21 13:26:52 runner 3 connected 2025/10/21 13:26:59 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/10/21 13:26:59 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/10/21 13:26:59 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/10/21 13:27:00 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:27:15 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:27:37 runner 2 connected 2025/10/21 13:27:44 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:27:56 runner 8 connected 2025/10/21 13:27:56 runner 7 connected 2025/10/21 13:28:12 runner 0 connected 2025/10/21 13:28:33 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:28:33 runner 3 connected 2025/10/21 13:28:34 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:28:35 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:28:46 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:29:11 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:29:23 runner 1 connected 2025/10/21 13:29:28 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:29:30 runner 5 connected 2025/10/21 13:29:31 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:29:31 runner 4 connected 2025/10/21 13:29:36 runner 0 connected 2025/10/21 13:29:42 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:30:02 runner 1 connected 2025/10/21 13:30:03 STAT { "buffer too small": 0, "candidate triage jobs": 36, "candidates": 5414, "comps overflows": 0, "corpus": 7105, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 1841, "coverage": 95292, "distributor delayed": 10329, "distributor undelayed": 10329, "distributor violated": 228, "exec candidate": 7330, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 13304, "exec total [new]": 34612, "exec triage": 22132, "executor restarts [base]": 179, "executor restarts [new]": 460, "fault jobs": 0, "fuzzer jobs": 36, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 95974, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7330, "no exec duration": 21774000000, "no exec requests": 100, "pending": 0, "prog exec time": 246, "reproducing": 0, "rpc recv": 3700738328, "rpc sent": 816578624, "signal": 94662, "smash jobs": 0, "triage jobs": 0, "vm output": 21476870, "vm restarts [base]": 13, "vm restarts [new]": 48 } 2025/10/21 13:30:10 patched crashed: SYZFAIL: posix_spawnp failed [need repro = false] 2025/10/21 13:30:17 runner 0 connected 2025/10/21 13:30:20 runner 6 connected 2025/10/21 13:30:33 runner 3 connected 2025/10/21 13:30:44 crash "possible deadlock in ocfs2_del_inode_from_orphan" is already known 2025/10/21 13:30:44 base crash "possible deadlock in ocfs2_del_inode_from_orphan" is to be ignored 2025/10/21 13:30:44 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/10/21 13:30:48 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/10/21 13:30:50 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/10/21 13:30:51 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/10/21 13:30:51 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/10/21 13:31:00 runner 7 connected 2025/10/21 13:31:09 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:31:16 crash "general protection fault in lmLogSync" is already known 2025/10/21 13:31:16 base crash "general protection fault in lmLogSync" is to be ignored 2025/10/21 13:31:16 patched crashed: general protection fault in lmLogSync [need repro = false] 2025/10/21 13:31:33 runner 2 connected 2025/10/21 13:31:38 runner 5 connected 2025/10/21 13:31:38 runner 8 connected 2025/10/21 13:31:40 runner 0 connected 2025/10/21 13:31:41 runner 6 connected 2025/10/21 13:31:58 runner 0 connected 2025/10/21 13:32:06 runner 3 connected 2025/10/21 13:32:17 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:32:29 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/10/21 13:32:29 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/10/21 13:32:29 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/10/21 13:32:30 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:32:35 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:32:50 base crash: kernel BUG in jfs_evict_inode 2025/10/21 13:33:02 patched crashed: SYZFAIL: posix_spawnp failed [need repro = false] 2025/10/21 13:33:03 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:33:13 runner 7 connected 2025/10/21 13:33:18 runner 3 connected 2025/10/21 13:33:19 runner 8 connected 2025/10/21 13:33:23 runner 1 connected 2025/10/21 13:33:39 runner 2 connected 2025/10/21 13:33:53 runner 0 connected 2025/10/21 13:33:56 base crash: KASAN: slab-out-of-bounds Read in dtSplitPage 2025/10/21 13:33:59 runner 5 connected 2025/10/21 13:34:10 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:34:19 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:34:26 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/10/21 13:34:31 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:34:33 base crash: KASAN: slab-use-after-free Write in txEnd 2025/10/21 13:34:49 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:34:53 runner 1 connected 2025/10/21 13:35:00 runner 6 connected 2025/10/21 13:35:03 STAT { "buffer too small": 0, "candidate triage jobs": 3, "candidates": 4234, "comps overflows": 0, "corpus": 7690, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 2378, "coverage": 96700, "distributor delayed": 11266, "distributor undelayed": 11263, "distributor violated": 234, "exec candidate": 8510, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 17817, "exec total [new]": 47795, "exec triage": 24024, "executor restarts [base]": 222, "executor restarts [new]": 599, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 5, "hints jobs": 0, "max signal": 97378, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7918, "no exec duration": 21774000000, "no exec requests": 100, "pending": 0, "prog exec time": 205, "reproducing": 0, "rpc recv": 4644948740, "rpc sent": 1104183296, "signal": 96121, "smash jobs": 0, "triage jobs": 0, "vm output": 31202240, "vm restarts [base]": 17, "vm restarts [new]": 64 } 2025/10/21 13:35:08 runner 1 connected 2025/10/21 13:35:18 runner 0 connected 2025/10/21 13:35:21 runner 2 connected 2025/10/21 13:35:22 runner 0 connected 2025/10/21 13:35:34 base crash: KASAN: slab-out-of-bounds Read in dtSplitPage 2025/10/21 13:35:38 runner 4 connected 2025/10/21 13:35:50 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:35:51 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:36:00 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:36:03 triaged 95.6% of the corpus 2025/10/21 13:36:03 starting bug reproductions 2025/10/21 13:36:03 starting bug reproductions (max 6 VMs, 4 repros) 2025/10/21 13:36:27 crash "kernel BUG in may_open" is already known 2025/10/21 13:36:27 base crash "kernel BUG in may_open" is to be ignored 2025/10/21 13:36:27 patched crashed: kernel BUG in may_open [need repro = false] 2025/10/21 13:36:29 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:36:30 patched crashed: SYZFAIL: posix_spawnp failed [need repro = false] 2025/10/21 13:36:31 runner 1 connected 2025/10/21 13:36:33 triaged 100.0% of the corpus 2025/10/21 13:36:38 runner 7 connected 2025/10/21 13:36:48 runner 0 connected 2025/10/21 13:36:50 runner 0 connected 2025/10/21 13:37:03 crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2025/10/21 13:37:03 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is to be ignored 2025/10/21 13:37:03 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:37:11 crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2025/10/21 13:37:11 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is to be ignored 2025/10/21 13:37:11 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:37:16 runner 3 connected 2025/10/21 13:37:19 runner 4 connected 2025/10/21 13:37:26 runner 5 connected 2025/10/21 13:37:27 crash "KASAN: slab-use-after-free Read in dtSplitPage" is already known 2025/10/21 13:37:27 base crash "KASAN: slab-use-after-free Read in dtSplitPage" is to be ignored 2025/10/21 13:37:27 patched crashed: KASAN: slab-use-after-free Read in dtSplitPage [need repro = false] 2025/10/21 13:37:38 base crash: possible deadlock in ocfs2_init_acl 2025/10/21 13:37:39 crash "KASAN: slab-use-after-free Read in dtSplitPage" is already known 2025/10/21 13:37:39 base crash "KASAN: slab-use-after-free Read in dtSplitPage" is to be ignored 2025/10/21 13:37:39 patched crashed: KASAN: slab-use-after-free Read in dtSplitPage [need repro = false] 2025/10/21 13:37:41 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/10/21 13:37:52 runner 8 connected 2025/10/21 13:37:59 runner 7 connected 2025/10/21 13:38:18 runner 6 connected 2025/10/21 13:38:27 runner 0 connected 2025/10/21 13:38:36 runner 1 connected 2025/10/21 13:38:37 crash "KASAN: slab-use-after-free Read in dtSplitPage" is already known 2025/10/21 13:38:37 base crash "KASAN: slab-use-after-free Read in dtSplitPage" is to be ignored 2025/10/21 13:38:37 patched crashed: KASAN: slab-use-after-free Read in dtSplitPage [need repro = false] 2025/10/21 13:38:38 runner 2 connected 2025/10/21 13:38:47 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:38:59 crash "WARNING in dbAdjTree" is already known 2025/10/21 13:38:59 base crash "WARNING in dbAdjTree" is to be ignored 2025/10/21 13:38:59 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/10/21 13:39:04 crash "WARNING in dbAdjTree" is already known 2025/10/21 13:39:04 base crash "WARNING in dbAdjTree" is to be ignored 2025/10/21 13:39:04 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/10/21 13:39:17 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:39:19 crash "WARNING in dbAdjTree" is already known 2025/10/21 13:39:19 base crash "WARNING in dbAdjTree" is to be ignored 2025/10/21 13:39:19 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/10/21 13:39:26 runner 8 connected 2025/10/21 13:39:36 runner 5 connected 2025/10/21 13:39:49 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/10/21 13:39:49 runner 1 connected 2025/10/21 13:40:00 runner 3 connected 2025/10/21 13:40:03 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 48, "corpus": 7807, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 4760, "coverage": 97317, "distributor delayed": 11487, "distributor undelayed": 11487, "distributor violated": 234, "exec candidate": 12744, "exec collide": 388, "exec fuzz": 809, "exec gen": 34, "exec hints": 157, "exec inject": 0, "exec minimize": 2133, "exec retries": 0, "exec seeds": 260, "exec smash": 547, "exec total [base]": 21094, "exec total [new]": 56856, "exec triage": 24499, "executor restarts [base]": 271, "executor restarts [new]": 752, "fault jobs": 0, "fuzzer jobs": 186, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 65, "max signal": 99394, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1756, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8114, "no exec duration": 21880000000, "no exec requests": 101, "pending": 0, "prog exec time": 737, "reproducing": 0, "rpc recv": 5645436408, "rpc sent": 1522234080, "signal": 96602, "smash jobs": 103, "triage jobs": 18, "vm output": 39421512, "vm restarts [base]": 23, "vm restarts [new]": 80 } 2025/10/21 13:40:05 runner 2 connected 2025/10/21 13:40:09 runner 6 connected 2025/10/21 13:40:45 runner 0 connected 2025/10/21 13:41:32 base crash: possible deadlock in ocfs2_init_acl 2025/10/21 13:41:43 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/10/21 13:41:45 crash "possible deadlock in ntfs_fiemap" is already known 2025/10/21 13:41:45 base crash "possible deadlock in ntfs_fiemap" is to be ignored 2025/10/21 13:41:45 patched crashed: possible deadlock in ntfs_fiemap [need repro = false] 2025/10/21 13:41:56 crash "KASAN: slab-use-after-free Read in dtSplitPage" is already known 2025/10/21 13:41:56 base crash "KASAN: slab-use-after-free Read in dtSplitPage" is to be ignored 2025/10/21 13:41:56 patched crashed: KASAN: slab-use-after-free Read in dtSplitPage [need repro = false] 2025/10/21 13:42:28 runner 0 connected 2025/10/21 13:42:32 runner 7 connected 2025/10/21 13:42:41 runner 4 connected 2025/10/21 13:42:52 runner 8 connected 2025/10/21 13:42:55 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:42:58 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:42:58 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:43:10 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:43:12 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/10/21 13:43:13 base crash: possible deadlock in ntfs_fiemap 2025/10/21 13:43:51 runner 6 connected 2025/10/21 13:43:54 runner 3 connected 2025/10/21 13:43:55 runner 1 connected 2025/10/21 13:43:59 runner 2 connected 2025/10/21 13:44:01 runner 7 connected 2025/10/21 13:44:02 runner 1 connected 2025/10/21 13:44:27 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:44:29 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:44:34 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:44:36 crash "possible deadlock in ocfs2_reserve_suballoc_bits" is already known 2025/10/21 13:44:36 base crash "possible deadlock in ocfs2_reserve_suballoc_bits" is to be ignored 2025/10/21 13:44:36 patched crashed: possible deadlock in ocfs2_reserve_suballoc_bits [need repro = false] 2025/10/21 13:44:41 base crash: kernel BUG in jfs_evict_inode 2025/10/21 13:45:03 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 151, "corpus": 7949, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 7876, "coverage": 98740, "distributor delayed": 11719, "distributor undelayed": 11717, "distributor violated": 234, "exec candidate": 12744, "exec collide": 1100, "exec fuzz": 1998, "exec gen": 107, "exec hints": 514, "exec inject": 0, "exec minimize": 4658, "exec retries": 0, "exec seeds": 638, "exec smash": 1791, "exec total [base]": 23769, "exec total [new]": 63923, "exec triage": 25076, "executor restarts [base]": 331, "executor restarts [new]": 910, "fault jobs": 0, "fuzzer jobs": 371, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 3, "hints jobs": 132, "max signal": 100304, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 3772, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8360, "no exec duration": 22342000000, "no exec requests": 104, "pending": 0, "prog exec time": 495, "reproducing": 0, "rpc recv": 6478694152, "rpc sent": 2024870992, "signal": 97190, "smash jobs": 221, "triage jobs": 18, "vm output": 47484747, "vm restarts [base]": 26, "vm restarts [new]": 90 } 2025/10/21 13:45:08 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/10/21 13:45:11 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:45:16 runner 8 connected 2025/10/21 13:45:24 runner 3 connected 2025/10/21 13:45:26 runner 7 connected 2025/10/21 13:45:29 runner 0 connected 2025/10/21 13:45:31 runner 6 connected 2025/10/21 13:45:57 runner 2 connected 2025/10/21 13:46:00 runner 1 connected 2025/10/21 13:46:10 crash "INFO: task hung in user_get_super" is already known 2025/10/21 13:46:10 base crash "INFO: task hung in user_get_super" is to be ignored 2025/10/21 13:46:10 patched crashed: INFO: task hung in user_get_super [need repro = false] 2025/10/21 13:46:37 base crash: kernel BUG in txUnlock 2025/10/21 13:47:08 runner 0 connected 2025/10/21 13:47:10 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/10/21 13:47:35 runner 2 connected 2025/10/21 13:47:55 crash "kernel BUG in may_open" is already known 2025/10/21 13:47:55 base crash "kernel BUG in may_open" is to be ignored 2025/10/21 13:47:55 patched crashed: kernel BUG in may_open [need repro = false] 2025/10/21 13:47:57 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:48:07 runner 1 connected 2025/10/21 13:48:10 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:48:51 runner 8 connected 2025/10/21 13:48:54 runner 6 connected 2025/10/21 13:48:59 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:49:07 runner 7 connected 2025/10/21 13:49:08 crash "kernel BUG in dbFindBits" is already known 2025/10/21 13:49:08 base crash "kernel BUG in dbFindBits" is to be ignored 2025/10/21 13:49:08 patched crashed: kernel BUG in dbFindBits [need repro = false] 2025/10/21 13:49:16 crash "possible deadlock in ocfs2_xattr_set" is already known 2025/10/21 13:49:16 base crash "possible deadlock in ocfs2_xattr_set" is to be ignored 2025/10/21 13:49:16 patched crashed: possible deadlock in ocfs2_xattr_set [need repro = false] 2025/10/21 13:49:43 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/10/21 13:49:51 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/10/21 13:49:55 runner 2 connected 2025/10/21 13:49:56 runner 0 connected 2025/10/21 13:50:03 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 300, "corpus": 8085, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 13289, "coverage": 99140, "distributor delayed": 11969, "distributor undelayed": 11969, "distributor violated": 234, "exec candidate": 12744, "exec collide": 1964, "exec fuzz": 3738, "exec gen": 199, "exec hints": 993, "exec inject": 0, "exec minimize": 7571, "exec retries": 0, "exec seeds": 1021, "exec smash": 3618, "exec total [base]": 26752, "exec total [new]": 72858, "exec triage": 25702, "executor restarts [base]": 377, "executor restarts [new]": 1059, "fault jobs": 0, "fuzzer jobs": 459, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 7, "hints jobs": 130, "max signal": 101849, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 5507, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8594, "no exec duration": 22342000000, "no exec requests": 104, "pending": 0, "prog exec time": 584, "reproducing": 0, "rpc recv": 7336149848, "rpc sent": 2642593600, "signal": 97521, "smash jobs": 312, "triage jobs": 17, "vm output": 52844337, "vm restarts [base]": 29, "vm restarts [new]": 102 } 2025/10/21 13:50:05 runner 4 connected 2025/10/21 13:50:18 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:50:23 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:50:26 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:50:33 runner 1 connected 2025/10/21 13:50:41 runner 0 connected 2025/10/21 13:50:42 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:51:07 runner 1 connected 2025/10/21 13:51:19 runner 2 connected 2025/10/21 13:51:20 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:51:22 runner 8 connected 2025/10/21 13:51:33 runner 7 connected 2025/10/21 13:51:36 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:51:47 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:51:48 base crash: possible deadlock in ocfs2_init_acl 2025/10/21 13:51:48 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/10/21 13:52:02 base crash: possible deadlock in attr_data_get_block 2025/10/21 13:52:09 runner 2 connected 2025/10/21 13:52:22 patched crashed: possible deadlock in attr_data_get_block [need repro = false] 2025/10/21 13:52:24 runner 0 connected 2025/10/21 13:52:28 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:52:29 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:52:37 runner 1 connected 2025/10/21 13:52:38 runner 1 connected 2025/10/21 13:52:44 runner 3 connected 2025/10/21 13:52:52 runner 0 connected 2025/10/21 13:53:07 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:53:10 runner 5 connected 2025/10/21 13:53:17 runner 7 connected 2025/10/21 13:53:17 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:53:18 runner 4 connected 2025/10/21 13:53:32 base crash: kernel BUG in jfs_evict_inode 2025/10/21 13:53:54 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/10/21 13:53:57 runner 0 connected 2025/10/21 13:53:59 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:54:06 runner 2 connected 2025/10/21 13:54:10 crash "possible deadlock in ocfs2_del_inode_from_orphan" is already known 2025/10/21 13:54:10 base crash "possible deadlock in ocfs2_del_inode_from_orphan" is to be ignored 2025/10/21 13:54:10 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/10/21 13:54:30 runner 0 connected 2025/10/21 13:54:31 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:54:43 runner 1 connected 2025/10/21 13:54:48 runner 3 connected 2025/10/21 13:54:59 crash "possible deadlock in hfs_extend_file" is already known 2025/10/21 13:54:59 base crash "possible deadlock in hfs_extend_file" is to be ignored 2025/10/21 13:54:59 patched crashed: possible deadlock in hfs_extend_file [need repro = false] 2025/10/21 13:55:00 runner 6 connected 2025/10/21 13:55:03 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 398, "corpus": 8177, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 17037, "coverage": 99602, "distributor delayed": 12153, "distributor undelayed": 12153, "distributor violated": 234, "exec candidate": 12744, "exec collide": 2626, "exec fuzz": 4887, "exec gen": 267, "exec hints": 1262, "exec inject": 0, "exec minimize": 9590, "exec retries": 0, "exec seeds": 1303, "exec smash": 4943, "exec total [base]": 28589, "exec total [new]": 79013, "exec triage": 26075, "executor restarts [base]": 425, "executor restarts [new]": 1207, "fault jobs": 0, "fuzzer jobs": 500, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 5, "hints jobs": 142, "max signal": 102523, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 6882, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8748, "no exec duration": 22342000000, "no exec requests": 104, "pending": 0, "prog exec time": 611, "reproducing": 0, "rpc recv": 8362412816, "rpc sent": 3111499408, "signal": 97951, "smash jobs": 346, "triage jobs": 12, "vm output": 58898680, "vm restarts [base]": 36, "vm restarts [new]": 117 } 2025/10/21 13:55:08 crash "possible deadlock in ocfs2_reserve_suballoc_bits" is already known 2025/10/21 13:55:08 base crash "possible deadlock in ocfs2_reserve_suballoc_bits" is to be ignored 2025/10/21 13:55:08 patched crashed: possible deadlock in ocfs2_reserve_suballoc_bits [need repro = false] 2025/10/21 13:55:28 runner 1 connected 2025/10/21 13:55:29 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:55:34 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:55:44 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:55:48 runner 8 connected 2025/10/21 13:55:59 runner 0 connected 2025/10/21 13:56:12 base crash: possible deadlock in ocfs2_xattr_set 2025/10/21 13:56:18 runner 2 connected 2025/10/21 13:56:24 runner 4 connected 2025/10/21 13:56:31 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:56:33 runner 6 connected 2025/10/21 13:56:40 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/10/21 13:56:58 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/10/21 13:56:59 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/10/21 13:57:09 runner 1 connected 2025/10/21 13:57:13 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/10/21 13:57:15 patched crashed: possible deadlock in ocfs2_xattr_set [need repro = false] 2025/10/21 13:57:21 runner 0 connected 2025/10/21 13:57:29 patched crashed: possible deadlock in ocfs2_xattr_set [need repro = false] 2025/10/21 13:57:30 runner 8 connected 2025/10/21 13:57:47 runner 4 connected 2025/10/21 13:57:48 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/10/21 13:57:49 runner 6 connected 2025/10/21 13:57:57 base crash: kernel BUG in hfs_write_inode 2025/10/21 13:58:03 runner 1 connected 2025/10/21 13:58:06 runner 7 connected 2025/10/21 13:58:20 runner 3 connected 2025/10/21 13:58:31 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 13:58:37 runner 1 connected 2025/10/21 13:58:46 runner 2 connected 2025/10/21 13:58:47 crash "KASAN: slab-use-after-free Read in dtSplitPage" is already known 2025/10/21 13:58:47 base crash "KASAN: slab-use-after-free Read in dtSplitPage" is to be ignored 2025/10/21 13:58:47 patched crashed: KASAN: slab-use-after-free Read in dtSplitPage [need repro = false] 2025/10/21 13:59:10 crash "possible deadlock in ocfs2_calc_xattr_init" is already known 2025/10/21 13:59:10 base crash "possible deadlock in ocfs2_calc_xattr_init" is to be ignored 2025/10/21 13:59:10 patched crashed: possible deadlock in ocfs2_calc_xattr_init [need repro = false] 2025/10/21 13:59:28 runner 2 connected 2025/10/21 13:59:29 base crash: kernel BUG in jfs_evict_inode 2025/10/21 13:59:44 runner 4 connected 2025/10/21 13:59:58 runner 8 connected 2025/10/21 14:00:03 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:00:03 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 457, "corpus": 8220, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 19190, "coverage": 99766, "distributor delayed": 12331, "distributor undelayed": 12331, "distributor violated": 234, "exec candidate": 12744, "exec collide": 3198, "exec fuzz": 5964, "exec gen": 322, "exec hints": 1536, "exec inject": 0, "exec minimize": 10601, "exec retries": 0, "exec seeds": 1482, "exec smash": 6197, "exec total [base]": 30734, "exec total [new]": 83744, "exec triage": 26383, "executor restarts [base]": 487, "executor restarts [new]": 1460, "fault jobs": 0, "fuzzer jobs": 402, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 90, "max signal": 102932, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 8037, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8878, "no exec duration": 22342000000, "no exec requests": 104, "pending": 0, "prog exec time": 1035, "reproducing": 0, "rpc recv": 9252897256, "rpc sent": 3525168536, "signal": 98105, "smash jobs": 299, "triage jobs": 13, "vm output": 65318707, "vm restarts [base]": 39, "vm restarts [new]": 133 } 2025/10/21 14:00:27 runner 2 connected 2025/10/21 14:00:34 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:00:46 crash "WARNING in dbAdjTree" is already known 2025/10/21 14:00:46 base crash "WARNING in dbAdjTree" is to be ignored 2025/10/21 14:00:46 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/10/21 14:00:59 runner 1 connected 2025/10/21 14:01:04 base crash: kernel BUG in hfs_write_inode 2025/10/21 14:01:18 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:01:23 runner 2 connected 2025/10/21 14:01:41 base crash: possible deadlock in ocfs2_lock_global_qf 2025/10/21 14:01:43 runner 7 connected 2025/10/21 14:01:52 base crash: possible deadlock in ocfs2_xattr_set 2025/10/21 14:01:55 runner 0 connected 2025/10/21 14:02:08 runner 3 connected 2025/10/21 14:02:14 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:02:37 runner 1 connected 2025/10/21 14:02:40 base crash: possible deadlock in ocfs2_init_acl 2025/10/21 14:02:42 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:02:49 runner 2 connected 2025/10/21 14:02:51 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:03:03 runner 4 connected 2025/10/21 14:03:23 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:03:25 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:03:33 runner 3 connected 2025/10/21 14:03:36 runner 0 connected 2025/10/21 14:03:37 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/10/21 14:03:40 patched crashed: possible deadlock in ocfs2_xattr_set [need repro = false] 2025/10/21 14:03:40 runner 0 connected 2025/10/21 14:03:49 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:04:05 crash "WARNING in hfs_bnode_create" is already known 2025/10/21 14:04:05 base crash "WARNING in hfs_bnode_create" is to be ignored 2025/10/21 14:04:05 patched crashed: WARNING in hfs_bnode_create [need repro = false] 2025/10/21 14:04:09 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/10/21 14:04:12 runner 7 connected 2025/10/21 14:04:14 runner 1 connected 2025/10/21 14:04:27 runner 2 connected 2025/10/21 14:04:28 runner 2 connected 2025/10/21 14:04:29 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/10/21 14:04:37 base crash: possible deadlock in ocfs2_calc_xattr_init 2025/10/21 14:04:38 runner 4 connected 2025/10/21 14:04:55 runner 0 connected 2025/10/21 14:04:55 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/10/21 14:04:58 runner 3 connected 2025/10/21 14:05:03 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 485, "corpus": 8279, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 21943, "coverage": 99900, "distributor delayed": 12482, "distributor undelayed": 12482, "distributor violated": 234, "exec candidate": 12744, "exec collide": 3799, "exec fuzz": 7161, "exec gen": 391, "exec hints": 1796, "exec inject": 0, "exec minimize": 11953, "exec retries": 0, "exec seeds": 1644, "exec smash": 7648, "exec total [base]": 32058, "exec total [new]": 89156, "exec triage": 26693, "executor restarts [base]": 557, "executor restarts [new]": 1685, "fault jobs": 0, "fuzzer jobs": 383, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 5, "hints jobs": 87, "max signal": 103244, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 9259, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 9011, "no exec duration": 22342000000, "no exec requests": 104, "pending": 0, "prog exec time": 666, "reproducing": 0, "rpc recv": 10047485720, "rpc sent": 3923878040, "signal": 98226, "smash jobs": 280, "triage jobs": 16, "vm output": 72987206, "vm restarts [base]": 45, "vm restarts [new]": 146 } 2025/10/21 14:05:04 base crash: possible deadlock in ocfs2_init_acl 2025/10/21 14:05:18 runner 6 connected 2025/10/21 14:05:26 runner 1 connected 2025/10/21 14:05:48 crash "general protection fault in lmLogSync" is already known 2025/10/21 14:05:48 base crash "general protection fault in lmLogSync" is to be ignored 2025/10/21 14:05:48 patched crashed: general protection fault in lmLogSync [need repro = false] 2025/10/21 14:05:49 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/10/21 14:05:51 runner 2 connected 2025/10/21 14:05:55 runner 0 connected 2025/10/21 14:06:24 patched crashed: possible deadlock in attr_data_get_block [need repro = false] 2025/10/21 14:06:33 fuzzer has not reached the modified code in 30m0s, aborting 2025/10/21 14:06:33 repro loop terminated 2025/10/21 14:06:33 base: rpc server terminaled 2025/10/21 14:06:33 new: rpc server terminaled 2025/10/21 14:06:33 base: pool terminated 2025/10/21 14:06:33 base: kernel context loop terminated 2025/10/21 14:07:05 new: pool terminated 2025/10/21 14:07:05 new: kernel context loop terminated 2025/10/21 14:07:05 diff fuzzing terminated 2025/10/21 14:07:05 bug reporting terminated 2025/10/21 14:07:05 status reporting terminated 2025/10/21 14:07:05 fuzzing is finished 2025/10/21 14:07:05 status at the end: Title On-Base On-Patched INFO: task hung in __iterate_supers 1 crashes INFO: task hung in user_get_super 1 crashes KASAN: slab-out-of-bounds Read in dtSplitPage 2 crashes 5 crashes KASAN: slab-use-after-free Read in dtSplitPage 5 crashes KASAN: slab-use-after-free Write in txEnd 1 crashes SYZFAIL: posix_spawnp failed 3 crashes WARNING in dbAdjTree 4 crashes WARNING in hfs_bnode_create 1 crashes general protection fault in lmLogSync 2 crashes kernel BUG in dbFindBits 1 crashes kernel BUG in hfs_write_inode 13 crashes 39 crashes kernel BUG in jfs_evict_inode 6 crashes 19 crashes kernel BUG in may_open 2 crashes kernel BUG in txEnd 2 crashes kernel BUG in txUnlock 2 crashes 5 crashes possible deadlock in attr_data_get_block 1 crashes 2 crashes possible deadlock in dqget 1 crashes possible deadlock in hfs_extend_file 1 crashes possible deadlock in ntfs_fiemap 1 crashes 1 crashes possible deadlock in ocfs2_calc_xattr_init 1 crashes 1 crashes possible deadlock in ocfs2_del_inode_from_orphan 2 crashes possible deadlock in ocfs2_init_acl 5 crashes 8 crashes possible deadlock in ocfs2_lock_global_qf 1 crashes possible deadlock in ocfs2_reserve_suballoc_bits 2 crashes possible deadlock in ocfs2_try_remove_refcount_tree 8 crashes 31 crashes possible deadlock in ocfs2_xattr_set 2 crashes 4 crashes